Privacy Policy

Account details: your email address, and your name if you give us one. Your password is never stored in plain text — only a one-way hash of it.

Purchase and wallet activity: which numbers you've bought or rented, the SMS messages and codes received on them, and your wallet balance and transaction history.

Payment records: the amount, currency, fees, reference, and status of funding transactions. Card, bank-transfer, mobile-money and crypto payments are handled by payment processors. We do not receive your bank password, full card credentials, or crypto wallet private keys.

Support messages: anything you send through the in-app support or discovery chat.

Technical and usage data: information used for abuse prevention and operational analytics, such as request information, page visits and device/browser information.

To run your account and wallet, deliver the numbers and codes you pay for, process payments, respond to support requests, and detect the kind of abuse that would let one bad actor spend everyone else's trust — fraud, refund looping, or scripted account creation.

We use analytics to understand site usage and improve the service. Optional Vercel and Google analytics and Meta advertising measurement run according to your privacy choices. You can change those choices below. We do not sell your account data.

Our upstream telecom partner, to actually provision the phone number you're renting or buying — this is unavoidable, since they're the ones assigning it to you.

Payment processors, including KoraPay for supported fiat payments and OxaPay for new crypto payments when enabled, to process and verify a transaction you initiate. NOWPayments may retain records and process outstanding payments initiated before the transition.

OpenAI, to provide support and number-discovery assistance. The AI receives your chat messages and limited account context when relevant, such as wallet balances, transaction status, and purchased-number status. We exclude account passwords, authentication secrets and verification-code content fetched from your inbox from this account context. Avoid putting passwords or other secrets into chat messages.

Hosting and operational providers, including Vercel and our database and email-delivery providers, help deliver the platform, store records, measure usage and send account communications. Where enabled, Google and Meta receive information needed for their analytics or advertising measurement features.

Account and wallet data is kept for as long as your account is active, so your history, ledger, and past codes stay available to you in the dashboard. Contact support for a deletion or export request. Some transaction and security records may need to be retained for reconciliation, fraud prevention or applicable obligations; support will explain the records affected.

Passwords are hashed, never stored as plain text. Sessions use secure, HTTP-only cookies that can't be read by page scripts. Payment webhooks are cryptographically verified so a request can't be forged to fake a payment.

You can ask us, through support, to export what we hold on your account or to delete your account entirely. Before deleting an account with a remaining balance or an active rental, contact support to resolve those items and understand what will happen.

If this policy changes in a way that matters, we'll update the date below and, where the change is significant, mention it in the app.